{"vulnerability": "cve-2017-12617", "sightings": [{"uuid": "947b3f93-6796-43c2-9287-4cdd927225c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/9a9801da-049b-4458-ab1c-7a892d5feb76", "content": "", "creation_timestamp": "2020-10-09T15:24:13.000000Z"}, {"uuid": "19d7d6d3-cac5-46c2-ab1e-8017c5c05d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "cb0d92b2-5ed8-48a0-b8d9-0f6af8346d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "exploited", "source": "https://www.exploit-db.com/exploits/42966", "content": "", "creation_timestamp": "2017-10-09T00:00:00.000000Z"}, {"uuid": "409c1aef-a28f-4106-b7d5-316af86df245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43008", "content": "", "creation_timestamp": "2017-10-17T00:00:00.000000Z"}, {"uuid": "05843c33-3801-460b-ad51-169b524f5a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971419", "content": "", "creation_timestamp": "2024-12-24T20:29:03.273805Z"}, {"uuid": "b0db57dc-1091-4d04-8d66-4dfffc5f5429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "72549cbb-3411-4331-99a3-c2426cae089a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:53.000000Z"}, {"uuid": "42409d96-0c94-4402-b1cf-ee88b45b63ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:15.000000Z"}, {"uuid": "4d40c7a9-cb07-4555-8774-fc5932924000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:06.000000Z"}, {"uuid": "22efc2ef-4ef7-447e-9065-2aec680f0a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "92577a96-9865-4774-928a-b1280817f01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3meaxbnbibwr2", "content": "", "creation_timestamp": "2026-02-07T08:01:47.483257Z"}, {"uuid": "815239f6-1ffd-48c0-a473-ee122e4f480a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2017-12617", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/237de4c3-2f15-4414-af25-7ea9c72c6e04", "content": "", "creation_timestamp": "2026-02-02T12:28:03.371040Z"}, {"uuid": "b7f4cc94-5c32-41a2-a9be-21b00103acf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/rce/apache_tomcat_cve_2017_12617", "content": "", "creation_timestamp": "2024-12-10T10:34:13.000000Z"}, {"uuid": "e23b4b6e-be53-4c75-aecb-46e437317453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/poxek/2400", "content": "#CVE\n\nApache Tomcat RCE\nCVE-2017-12617\n\naffect systems with HTTP PUTs enabled (via setting the \"read-only\" initialization parameter of the Default servlet to \"false\") are affected.", "creation_timestamp": "2022-08-29T19:00:04.000000Z"}, {"uuid": "3e5cdc94-b39b-4897-921e-0368e8d431b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "Telegram/I3J5qCH_JKCFSOMGFBcX6SqAo4S1Q6VOiRpHJLugpWkBKm3P", "content": "", "creation_timestamp": "2025-02-06T02:42:29.000000Z"}, {"uuid": "e22de30b-274b-4729-ad53-f3c35622dc4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/arpsyndicate/1300", "content": "#ExploitObserverAlert\n\nCVE-2017-12617\n\nDESCRIPTION: Exploit Observer has 132 entries related to CVE-2017-12617. When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.\n\nFIRST-EPSS: 0.974700000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-04T20:41:30.000000Z"}, {"uuid": "a3faf5fd-7921-46f1-800c-84703d28fc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/arpsyndicate/1505", "content": "#ExploitObserverAlert\n\nCVE-2017-12617\n\nDESCRIPTION: Exploit Observer has 132 entries related to CVE-2017-12617. When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.\n\nFIRST-EPSS: 0.974700000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-06T15:43:10.000000Z"}, {"uuid": "64121206-5ed6-4368-8593-d66ca67ec2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "Telegram/sQWWAbPQln1mhAoxoxZK8KQRUx1HB63SmzdtVeH38VLUnWo", "content": "", "creation_timestamp": "2025-04-29T23:00:05.000000Z"}, {"uuid": "54e5b24c-1763-4bc3-8bb1-30ea1f45678d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://t.me/KaitNews/5622", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0631 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0648\u0635\u0644\u0647 \u0634\u062f \n\n\u2764\ufe0f\ud83c\udf41\ud83d\udda4\ud83c\udf41\ud83c\uddee\ud83c\uddf7\ud83c\udf41\ud83d\udda4\ud83c\udf41\u2764\ufe0f\n\n\u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u062e\u0628\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u0628\u0647 \u0646\u0642\u0644 \u0627\u0632 securityweek :\n\u0686\u0646\u062f\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 \u06cc\u06a9 \u0645\u0648\u0631\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u062a\u0627 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f\u060c \u062f\u0631 \u0647\u0641\u062a\u0647\u200c\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 \u062f\u0631 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0648\u0635\u0644\u0647 \u0634\u062f. \u0622\u067e\u0627\u0686\u06cc Tomcat \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0628\u0646\u06cc\u0627\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u067e\u0627\u0686\u06cc \u062a\u0648\u0633\u0639\u0647 \u06cc\u0627\u0641\u062a\u0647\u060c \u06cc\u06a9 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u0627\u0632 \u062c\u0627\u0648\u0627 \u0633\u0631\u0648\u0644\u062a\u060c \u067e\u06cc\u062c\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u062c\u0627\u0648\u0627 (JSP)\u060c \u0633\u0648\u06a9\u062a \u0648\u0628 \u062c\u0627\u0648\u0627 \u0648 \u0641\u0646\u0627\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u0632\u0628\u0627\u0646 \u0639\u0628\u0627\u0631\u062a\u06cc \u062c\u0627\u0648\u0627 \u0627\u0633\u062a. \u06af\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 Tomcat \u0628\u0647 \u0637\u0648\u0631 \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u062f\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u06cc \u0648\u0628 \u0648 \u0628\u0627\u0644\u0627\u06cc \u06f7\u06f0 \u062f\u0631\u0635\u062f \u0627\u0632 \u0645\u0631\u0627\u06a9\u0632 \u062f\u0627\u062f\u0647\u200c\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0631\u0648\u0632 \u0633\u0647\u200c\u0634\u0646\u0628\u0647 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0637\u0644\u0627\u0639 \u062f\u0627\u062f\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0631\u0627\u0647 \u062f\u0648\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f7\u00bb \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u062f\u0631\u062c\u0647\u200c\u06cc \u0634\u062f\u062a \u0622\u0646 \u00ab\u0645\u0647\u0645\u00bb \u062a\u0639\u06cc\u06cc\u0646 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u06f9.\u06f0.\u06f1\u060c \u06f8.\u06f5.\u06f2\u06f3\u060c \u06f8.\u06f0.\u06f4\u06f7 \u0648 \u06f7.\u06f0.\u06f8\u06f2 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647\u060c \u0648\u0635\u0644\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u062a\u0627\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u06a9\u0647 \u062a\u0627\u0628\u0639 HTTP PUT \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0647 \u0628\u0627\u0634\u0646\u062f \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u06cc\u06a9 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc JSP \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u062c\u0639\u0644\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u060c \u062f\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0647\u062f\u0641 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u06a9\u0646\u0646\u062f. \u0633\u067e\u0633 \u0627\u06cc\u0646 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631\u060c \u062f\u0631 \u0632\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632\u060c \u06a9\u062f \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc JSP \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u06cc\u06a9 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645\u06cc \u0628\u0647 \u0635\u0648\u0631\u062a \u0639\u0645\u0648\u0645\u06cc \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a.\n\n\u062f\u0631 \u062d\u0627\u0644\u06cc\u200c\u06a9\u0647 \u0627\u06cc\u0646 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc \u0628\u0647 \u0646\u0638\u0631 \u0645\u06cc\u200c\u0622\u06cc\u062f\u060c \u062a\u0646\u0647\u0627 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0627\u062b\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u06a9\u0647 \u06cc\u0627 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0633\u0631\u0648\u0644\u062a \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u06a9\u0647 \u0631\u0648\u06cc false \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0631\u0627 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f \u0648 \u06cc\u0627 \u062f\u0627\u0631\u0627\u06cc \u0633\u0631\u0648\u0644\u062a WebDAV \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u06a9\u0647 \u0631\u0648\u06cc false \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647\u060c \u0628\u0627\u0634\u0646\u062f. \u067e\u06cc\u062a\u0631 \u0627\u0633\u062a\u0648\u06a9\u0644\u06cc \u0627\u0632 Alphabot Security \u062a\u0648\u0636\u06cc\u062d \u062f\u0627\u062f: \u00ab\u0627\u0632 \u0622\u0646\u200c\u062c\u0627 \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0639\u0645\u0648\u0644 \u0627\u06cc\u0646 \u0648\u06cc\u0698\u06af\u06cc \u0646\u06cc\u0627\u0632 \u0646\u06cc\u0633\u062a\u060c \u0627\u06a9\u062b\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0646\u0641\u0648\u0630 \u0627\u06cc\u0646 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0631\u0648\u06cc false \u0631\u0627 \u0646\u062f\u0627\u0631\u0646\u062f \u0648 \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0646\u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\u00bb\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0645\u0634\u0627\u0628\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f5\u00bb \u0627\u0633\u062a \u06a9\u0647 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u067e\u0627\u0686\u06cc Tomcat \u062f\u0631 \u06f1\u06f9 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f7.\u06f0.\u06f8\u06f1 \u0622\u0646\u200c\u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0646\u062f. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f7\u00bb \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u0641\u0631\u062f \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 \u00ab\u062f\u0648\u0631 \u0632\u062f\u0646 CVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f5\u00bb \u062a\u0648\u0635\u06cc\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u06f7\u06f7 \u062f\u0631 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f6\u00bb \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u062f\u0648\u0631 \u0628\u0632\u0646\u062f \u0648 \u06a9\u062f \u0645\u0646\u0628\u0639 JSP\u0647\u0627 \u0631\u0627 \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u062c\u0639\u0644\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u060c \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u062f. \n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u062f\u0631 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc \u0627\u0633\u062a\u0631\u0627\u062a\u0633 \u06f2\u060c \u0627\u062d\u062a\u0645\u0627\u0644\u0627 \u0628\u0647 \u0648\u0641\u0648\u0631 \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc \u0627\u0633\u062a\u0631\u0627\u062a\u0633 \u06f2 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 \u0646\u0641\u0648\u0630 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc Equifax \u06a9\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u0627\u0633\u062a\u060c \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0686\u0646\u062f \u0633\u0627\u0644 \u067e\u06cc\u0634\u060c \u06cc\u06a9 \u06a9\u0631\u0645 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a \u06a9\u0647 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0627\u062f\u060c \u0627\u0645\u0627 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u0632 \u0647\u06cc\u0686 \u0622\u0633\u06cc\u0628\u200c\u200d\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0646\u0645\u06cc\u200c\u06a9\u0631\u062f\u060c \u0628\u0644\u06a9\u0647 \u0627\u0632 \u062a\u0631\u06a9\u06cc\u0628 \u0646\u0627\u0645\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u06af\u0630\u0631\u0648\u0627\u0698\u0647\u200c\u0647\u0627\u06cc \u0645\u062a\u062f\u0627\u0648\u0644 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0631\u062f.", "creation_timestamp": "2026-08-04T07:00:03.382264Z"}, {"uuid": "052d039a-a903-4088-9f57-58df299731e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/information_security_channel/9627", "content": "Immediately Patch New Discovered Apache Tomcat RCE Flaw (CVE-2017-12617) that Allows Attackers to Hack Your Servers\u2026 https://t.co/M9uLSpBJcV", "creation_timestamp": "2017-10-05T13:18:32.000000Z"}, {"uuid": "ba666e93-6c72-45e7-b937-2f9bd54b5838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/information_security_channel/9655", "content": "RT @TheHackersNews: Immediately Patch New Discovered Apache Tomcat RCE Flaw (CVE-2017-12617) that Allows Attackers to Hack Your Servers\u2026", "creation_timestamp": "2017-10-05T21:40:16.000000Z"}, {"uuid": "e74bd453-eae6-40ca-9b9f-43c616671c8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/9818", "content": "Exploit for Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / RCE (CVE-2017-12617) https://t.co/hYebroyVOT", "creation_timestamp": "2017-10-10T22:17:37.000000Z"}, {"uuid": "02f456d0-c4e5-4745-871a-bef18746643e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/2409", "content": "CVE-2017-12617\nApache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution\nhttps://github.com/cyberheartmi9/CVE-2017-12617", "creation_timestamp": "2017-10-09T22:18:05.000000Z"}, {"uuid": "0b8119c7-d889-406e-9b9b-64b5ff97b169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/293", "content": "ZeroDaily | 2017-10-10 | Breach blame game, Cyber victims clueless, and POC for CVE-2017-12617 \nhttps://www.hackerone.com/zerodaily/2017-10-10", "creation_timestamp": "2017-10-11T10:19:15.000000Z"}, {"uuid": "dad2de7b-b046-4d37-a37f-c7b0e9d224ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://t.me/KaitNews/5622", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0631 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0648\u0635\u0644\u0647 \u0634\u062f \n\n\u2764\ufe0f\ud83c\udf41\ud83d\udda4\ud83c\udf41\ud83c\uddee\ud83c\uddf7\ud83c\udf41\ud83d\udda4\ud83c\udf41\u2764\ufe0f\n\n\u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u062e\u0628\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u0628\u0647 \u0646\u0642\u0644 \u0627\u0632 securityweek :\n\u0686\u0646\u062f\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 \u06cc\u06a9 \u0645\u0648\u0631\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u062a\u0627 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f\u060c \u062f\u0631 \u0647\u0641\u062a\u0647\u200c\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 \u062f\u0631 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0648\u0635\u0644\u0647 \u0634\u062f. \u0622\u067e\u0627\u0686\u06cc Tomcat \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0628\u0646\u06cc\u0627\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u067e\u0627\u0686\u06cc \u062a\u0648\u0633\u0639\u0647 \u06cc\u0627\u0641\u062a\u0647\u060c \u06cc\u06a9 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u0627\u0632 \u062c\u0627\u0648\u0627 \u0633\u0631\u0648\u0644\u062a\u060c \u067e\u06cc\u062c\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u062c\u0627\u0648\u0627 (JSP)\u060c \u0633\u0648\u06a9\u062a \u0648\u0628 \u062c\u0627\u0648\u0627 \u0648 \u0641\u0646\u0627\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u0632\u0628\u0627\u0646 \u0639\u0628\u0627\u0631\u062a\u06cc \u062c\u0627\u0648\u0627 \u0627\u0633\u062a. \u06af\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 Tomcat \u0628\u0647 \u0637\u0648\u0631 \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u062f\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u06cc \u0648\u0628 \u0648 \u0628\u0627\u0644\u0627\u06cc \u06f7\u06f0 \u062f\u0631\u0635\u062f \u0627\u0632 \u0645\u0631\u0627\u06a9\u0632 \u062f\u0627\u062f\u0647\u200c\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0631\u0648\u0632 \u0633\u0647\u200c\u0634\u0646\u0628\u0647 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0637\u0644\u0627\u0639 \u062f\u0627\u062f\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0631\u0627\u0647 \u062f\u0648\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f7\u00bb \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u062f\u0631\u062c\u0647\u200c\u06cc \u0634\u062f\u062a \u0622\u0646 \u00ab\u0645\u0647\u0645\u00bb \u062a\u0639\u06cc\u06cc\u0646 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u06f9.\u06f0.\u06f1\u060c \u06f8.\u06f5.\u06f2\u06f3\u060c \u06f8.\u06f0.\u06f4\u06f7 \u0648 \u06f7.\u06f0.\u06f8\u06f2 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647\u060c \u0648\u0635\u0644\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u062a\u0627\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u06a9\u0647 \u062a\u0627\u0628\u0639 HTTP PUT \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0647 \u0628\u0627\u0634\u0646\u062f \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u06cc\u06a9 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc JSP \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u062c\u0639\u0644\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u060c \u062f\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0647\u062f\u0641 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u06a9\u0646\u0646\u062f. \u0633\u067e\u0633 \u0627\u06cc\u0646 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631\u060c \u062f\u0631 \u0632\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632\u060c \u06a9\u062f \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc JSP \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u06cc\u06a9 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645\u06cc \u0628\u0647 \u0635\u0648\u0631\u062a \u0639\u0645\u0648\u0645\u06cc \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a.\n\n\u062f\u0631 \u062d\u0627\u0644\u06cc\u200c\u06a9\u0647 \u0627\u06cc\u0646 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc \u0628\u0647 \u0646\u0638\u0631 \u0645\u06cc\u200c\u0622\u06cc\u062f\u060c \u062a\u0646\u0647\u0627 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0627\u062b\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u06a9\u0647 \u06cc\u0627 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0633\u0631\u0648\u0644\u062a \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u06a9\u0647 \u0631\u0648\u06cc false \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0631\u0627 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f \u0648 \u06cc\u0627 \u062f\u0627\u0631\u0627\u06cc \u0633\u0631\u0648\u0644\u062a WebDAV \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u06a9\u0647 \u0631\u0648\u06cc false \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647\u060c \u0628\u0627\u0634\u0646\u062f. \u067e\u06cc\u062a\u0631 \u0627\u0633\u062a\u0648\u06a9\u0644\u06cc \u0627\u0632 Alphabot Security \u062a\u0648\u0636\u06cc\u062d \u062f\u0627\u062f: \u00ab\u0627\u0632 \u0622\u0646\u200c\u062c\u0627 \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0639\u0645\u0648\u0644 \u0627\u06cc\u0646 \u0648\u06cc\u0698\u06af\u06cc \u0646\u06cc\u0627\u0632 \u0646\u06cc\u0633\u062a\u060c \u0627\u06a9\u062b\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0646\u0641\u0648\u0630 \u0627\u06cc\u0646 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0631\u0648\u06cc false \u0631\u0627 \u0646\u062f\u0627\u0631\u0646\u062f \u0648 \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0646\u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\u00bb\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0645\u0634\u0627\u0628\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f5\u00bb \u0627\u0633\u062a \u06a9\u0647 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u067e\u0627\u0686\u06cc Tomcat \u062f\u0631 \u06f1\u06f9 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f7.\u06f0.\u06f8\u06f1 \u0622\u0646\u200c\u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0646\u062f. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f7\u00bb \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u0641\u0631\u062f \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 \u00ab\u062f\u0648\u0631 \u0632\u062f\u0646 CVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f5\u00bb \u062a\u0648\u0635\u06cc\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u06f7\u06f7 \u062f\u0631 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f6\u00bb \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u062f\u0648\u0631 \u0628\u0632\u0646\u062f \u0648 \u06a9\u062f \u0645\u0646\u0628\u0639 JSP\u0647\u0627 \u0631\u0627 \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u062c\u0639\u0644\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u060c \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u062f. \n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u062f\u0631 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc \u0627\u0633\u062a\u0631\u0627\u062a\u0633 \u06f2\u060c \u0627\u062d\u062a\u0645\u0627\u0644\u0627 \u0628\u0647 \u0648\u0641\u0648\u0631 \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc \u0627\u0633\u062a\u0631\u0627\u062a\u0633 \u06f2 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 \u0646\u0641\u0648\u0630 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc Equifax \u06a9\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u0627\u0633\u062a\u060c \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0686\u0646\u062f \u0633\u0627\u0644 \u067e\u06cc\u0634\u060c \u06cc\u06a9 \u06a9\u0631\u0645 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a \u06a9\u0647 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0627\u062f\u060c \u0627\u0645\u0627 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u0632 \u0647\u06cc\u0686 \u0622\u0633\u06cc\u0628\u200c\u200d\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0646\u0645\u06cc\u200c\u06a9\u0631\u062f\u060c \u0628\u0644\u06a9\u0647 \u0627\u0632 \u062a\u0631\u06a9\u06cc\u0628 \u0646\u0627\u0645\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u06af\u0630\u0631\u0648\u0627\u0698\u0647\u200c\u0647\u0627\u06cc \u0645\u062a\u062f\u0627\u0648\u0644 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0631\u062f.", "creation_timestamp": "2026-08-05T00:00:51.550002Z"}, {"uuid": "1f9fb891-811c-4876-8620-c6a9d8ef113f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ada0c0d0-dea8-470a-8e4d-b219640c1b62", "content": "", "creation_timestamp": "2026-06-19T12:47:27.997408Z"}, {"uuid": "34ff74b4-81bd-4f76-9150-838def74091b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b14c365c-5256-4da8-b6dc-6a46772a89f9", "content": "", "creation_timestamp": "2026-06-23T14:05:10.632760Z"}, {"uuid": "c98b6c77-3ec8-4a76-b5f0-593fd6dc2820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-27T12:00:11.309252Z"}, {"uuid": "9e715006-4427-465a-b89e-587d740602e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mtwgkz6rgr2o", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2017-12617: When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HT\u2026\nCVSS 8.1 \u00b7 EPSS 100.0% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2017-12617\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-25T18:18:43.183558Z"}, {"uuid": "fddff2be-0d4d-4538-acb1-f632a872f23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-28T00:00:54.973476Z"}, {"uuid": "455e37d6-5171-46c2-82e5-c4127272ee18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-29T00:00:15.353909Z"}, {"uuid": "3de0ac52-673c-42f2-89a8-3b6eec0ecc79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/KaitNews/5622", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0631 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0648\u0635\u0644\u0647 \u0634\u062f \n\n\u2764\ufe0f\ud83c\udf41\ud83d\udda4\ud83c\udf41\ud83c\uddee\ud83c\uddf7\ud83c\udf41\ud83d\udda4\ud83c\udf41\u2764\ufe0f\n\n\u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u062e\u0628\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u0628\u0647 \u0646\u0642\u0644 \u0627\u0632 securityweek :\n\u0686\u0646\u062f\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 \u06cc\u06a9 \u0645\u0648\u0631\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u062a\u0627 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f\u060c \u062f\u0631 \u0647\u0641\u062a\u0647\u200c\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 \u062f\u0631 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0648\u0635\u0644\u0647 \u0634\u062f. \u0622\u067e\u0627\u0686\u06cc Tomcat \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0628\u0646\u06cc\u0627\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u067e\u0627\u0686\u06cc \u062a\u0648\u0633\u0639\u0647 \u06cc\u0627\u0641\u062a\u0647\u060c \u06cc\u06a9 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u0627\u0632 \u062c\u0627\u0648\u0627 \u0633\u0631\u0648\u0644\u062a\u060c \u067e\u06cc\u062c\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u062c\u0627\u0648\u0627 (JSP)\u060c \u0633\u0648\u06a9\u062a \u0648\u0628 \u062c\u0627\u0648\u0627 \u0648 \u0641\u0646\u0627\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u0632\u0628\u0627\u0646 \u0639\u0628\u0627\u0631\u062a\u06cc \u062c\u0627\u0648\u0627 \u0627\u0633\u062a. \u06af\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 Tomcat \u0628\u0647 \u0637\u0648\u0631 \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u062f\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u06cc \u0648\u0628 \u0648 \u0628\u0627\u0644\u0627\u06cc \u06f7\u06f0 \u062f\u0631\u0635\u062f \u0627\u0632 \u0645\u0631\u0627\u06a9\u0632 \u062f\u0627\u062f\u0647\u200c\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0631\u0648\u0632 \u0633\u0647\u200c\u0634\u0646\u0628\u0647 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0637\u0644\u0627\u0639 \u062f\u0627\u062f\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0631\u0627\u0647 \u062f\u0648\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f7\u00bb \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u062f\u0631\u062c\u0647\u200c\u06cc \u0634\u062f\u062a \u0622\u0646 \u00ab\u0645\u0647\u0645\u00bb \u062a\u0639\u06cc\u06cc\u0646 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u06f9.\u06f0.\u06f1\u060c \u06f8.\u06f5.\u06f2\u06f3\u060c \u06f8.\u06f0.\u06f4\u06f7 \u0648 \u06f7.\u06f0.\u06f8\u06f2 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647\u060c \u0648\u0635\u0644\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u062a\u0627\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u06a9\u0647 \u062a\u0627\u0628\u0639 HTTP PUT \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0647 \u0628\u0627\u0634\u0646\u062f \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u06cc\u06a9 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc JSP \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u062c\u0639\u0644\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u060c \u062f\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0647\u062f\u0641 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u06a9\u0646\u0646\u062f. \u0633\u067e\u0633 \u0627\u06cc\u0646 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631\u060c \u062f\u0631 \u0632\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632\u060c \u06a9\u062f \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc JSP \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u06cc\u06a9 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645\u06cc \u0628\u0647 \u0635\u0648\u0631\u062a \u0639\u0645\u0648\u0645\u06cc \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a.\n\n\u062f\u0631 \u062d\u0627\u0644\u06cc\u200c\u06a9\u0647 \u0627\u06cc\u0646 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc \u0628\u0647 \u0646\u0638\u0631 \u0645\u06cc\u200c\u0622\u06cc\u062f\u060c \u062a\u0646\u0647\u0627 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0627\u062b\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u06a9\u0647 \u06cc\u0627 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0633\u0631\u0648\u0644\u062a \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u06a9\u0647 \u0631\u0648\u06cc false \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0631\u0627 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f \u0648 \u06cc\u0627 \u062f\u0627\u0631\u0627\u06cc \u0633\u0631\u0648\u0644\u062a WebDAV \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u06a9\u0647 \u0631\u0648\u06cc false \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647\u060c \u0628\u0627\u0634\u0646\u062f. \u067e\u06cc\u062a\u0631 \u0627\u0633\u062a\u0648\u06a9\u0644\u06cc \u0627\u0632 Alphabot Security \u062a\u0648\u0636\u06cc\u062d \u062f\u0627\u062f: \u00ab\u0627\u0632 \u0622\u0646\u200c\u062c\u0627 \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0639\u0645\u0648\u0644 \u0627\u06cc\u0646 \u0648\u06cc\u0698\u06af\u06cc \u0646\u06cc\u0627\u0632 \u0646\u06cc\u0633\u062a\u060c \u0627\u06a9\u062b\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0646\u0641\u0648\u0630 \u0627\u06cc\u0646 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0631\u0648\u06cc false \u0631\u0627 \u0646\u062f\u0627\u0631\u0646\u062f \u0648 \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0646\u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\u00bb\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0645\u0634\u0627\u0628\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f5\u00bb \u0627\u0633\u062a \u06a9\u0647 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u067e\u0627\u0686\u06cc Tomcat \u062f\u0631 \u06f1\u06f9 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f7.\u06f0.\u06f8\u06f1 \u0622\u0646\u200c\u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0646\u062f. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f7\u00bb \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u0641\u0631\u062f \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 \u00ab\u062f\u0648\u0631 \u0632\u062f\u0646 CVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f5\u00bb \u062a\u0648\u0635\u06cc\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u06f7\u06f7 \u062f\u0631 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f6\u00bb \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u062f\u0648\u0631 \u0628\u0632\u0646\u062f \u0648 \u06a9\u062f \u0645\u0646\u0628\u0639 JSP\u0647\u0627 \u0631\u0627 \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u062c\u0639\u0644\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u060c \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u062f. \n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u062f\u0631 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc \u0627\u0633\u062a\u0631\u0627\u062a\u0633 \u06f2\u060c \u0627\u062d\u062a\u0645\u0627\u0644\u0627 \u0628\u0647 \u0648\u0641\u0648\u0631 \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc \u0627\u0633\u062a\u0631\u0627\u062a\u0633 \u06f2 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 \u0646\u0641\u0648\u0630 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc Equifax \u06a9\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u0627\u0633\u062a\u060c \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0686\u0646\u062f \u0633\u0627\u0644 \u067e\u06cc\u0634\u060c \u06cc\u06a9 \u06a9\u0631\u0645 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a \u06a9\u0647 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0627\u062f\u060c \u0627\u0645\u0627 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u0632 \u0647\u06cc\u0686 \u0622\u0633\u06cc\u0628\u200c\u200d\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0646\u0645\u06cc\u200c\u06a9\u0631\u062f\u060c \u0628\u0644\u06a9\u0647 \u0627\u0632 \u062a\u0631\u06a9\u06cc\u0628 \u0646\u0627\u0645\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u06af\u0630\u0631\u0648\u0627\u0698\u0647\u200c\u0647\u0627\u06cc \u0645\u062a\u062f\u0627\u0648\u0644 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0631\u062f.", "creation_timestamp": "2026-07-26T07:01:59.917183Z"}, {"uuid": "60bae9fa-a8b4-49c4-b279-dc94b854e8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/KaitNews/5622", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0631 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0648\u0635\u0644\u0647 \u0634\u062f \n\n\u2764\ufe0f\ud83c\udf41\ud83d\udda4\ud83c\udf41\ud83c\uddee\ud83c\uddf7\ud83c\udf41\ud83d\udda4\ud83c\udf41\u2764\ufe0f\n\n\u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u062e\u0628\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u0628\u0647 \u0646\u0642\u0644 \u0627\u0632 securityweek :\n\u0686\u0646\u062f\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 \u06cc\u06a9 \u0645\u0648\u0631\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u062a\u0627 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f\u060c \u062f\u0631 \u0647\u0641\u062a\u0647\u200c\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 \u062f\u0631 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0648\u0635\u0644\u0647 \u0634\u062f. \u0622\u067e\u0627\u0686\u06cc Tomcat \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0628\u0646\u06cc\u0627\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u067e\u0627\u0686\u06cc \u062a\u0648\u0633\u0639\u0647 \u06cc\u0627\u0641\u062a\u0647\u060c \u06cc\u06a9 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u0627\u0632 \u062c\u0627\u0648\u0627 \u0633\u0631\u0648\u0644\u062a\u060c \u067e\u06cc\u062c\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u062c\u0627\u0648\u0627 (JSP)\u060c \u0633\u0648\u06a9\u062a \u0648\u0628 \u062c\u0627\u0648\u0627 \u0648 \u0641\u0646\u0627\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u0632\u0628\u0627\u0646 \u0639\u0628\u0627\u0631\u062a\u06cc \u062c\u0627\u0648\u0627 \u0627\u0633\u062a. \u06af\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 Tomcat \u0628\u0647 \u0637\u0648\u0631 \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u062f\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u06cc \u0648\u0628 \u0648 \u0628\u0627\u0644\u0627\u06cc \u06f7\u06f0 \u062f\u0631\u0635\u062f \u0627\u0632 \u0645\u0631\u0627\u06a9\u0632 \u062f\u0627\u062f\u0647\u200c\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u067e\u0627\u0686\u06cc Tomcat \u0631\u0648\u0632 \u0633\u0647\u200c\u0634\u0646\u0628\u0647 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0637\u0644\u0627\u0639 \u062f\u0627\u062f\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0631\u0627\u0647 \u062f\u0648\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f7\u00bb \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u062f\u0631\u062c\u0647\u200c\u06cc \u0634\u062f\u062a \u0622\u0646 \u00ab\u0645\u0647\u0645\u00bb \u062a\u0639\u06cc\u06cc\u0646 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u06f9.\u06f0.\u06f1\u060c \u06f8.\u06f5.\u06f2\u06f3\u060c \u06f8.\u06f0.\u06f4\u06f7 \u0648 \u06f7.\u06f0.\u06f8\u06f2 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647\u060c \u0648\u0635\u0644\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u062a\u0627\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u06a9\u0647 \u062a\u0627\u0628\u0639 HTTP PUT \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0647 \u0628\u0627\u0634\u0646\u062f \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u06cc\u06a9 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc JSP \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u062c\u0639\u0644\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u060c \u062f\u0631 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 \u0647\u062f\u0641 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u06a9\u0646\u0646\u062f. \u0633\u067e\u0633 \u0627\u06cc\u0646 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631\u060c \u062f\u0631 \u0632\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632\u060c \u06a9\u062f \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u067e\u0631\u0648\u0646\u062f\u0647\u200c\u06cc JSP \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u06cc\u06a9 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645\u06cc \u0628\u0647 \u0635\u0648\u0631\u062a \u0639\u0645\u0648\u0645\u06cc \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a.\n\n\u062f\u0631 \u062d\u0627\u0644\u06cc\u200c\u06a9\u0647 \u0627\u06cc\u0646 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc \u0628\u0647 \u0646\u0638\u0631 \u0645\u06cc\u200c\u0622\u06cc\u062f\u060c \u062a\u0646\u0647\u0627 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0627\u062b\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u06a9\u0647 \u06cc\u0627 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0633\u0631\u0648\u0644\u062a \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u06a9\u0647 \u0631\u0648\u06cc false \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0631\u0627 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f \u0648 \u06cc\u0627 \u062f\u0627\u0631\u0627\u06cc \u0633\u0631\u0648\u0644\u062a WebDAV \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u06a9\u0647 \u0631\u0648\u06cc false \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647\u060c \u0628\u0627\u0634\u0646\u062f. \u067e\u06cc\u062a\u0631 \u0627\u0633\u062a\u0648\u06a9\u0644\u06cc \u0627\u0632 Alphabot Security \u062a\u0648\u0636\u06cc\u062d \u062f\u0627\u062f: \u00ab\u0627\u0632 \u0622\u0646\u200c\u062c\u0627 \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0639\u0645\u0648\u0644 \u0627\u06cc\u0646 \u0648\u06cc\u0698\u06af\u06cc \u0646\u06cc\u0627\u0632 \u0646\u06cc\u0633\u062a\u060c \u0627\u06a9\u062b\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0646\u0641\u0648\u0630 \u0627\u06cc\u0646 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0641\u0642\u0637\u200c\u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0631\u0648\u06cc false \u0631\u0627 \u0646\u062f\u0627\u0631\u0646\u062f \u0648 \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0646\u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\u00bb\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0645\u0634\u0627\u0628\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f5\u00bb \u0627\u0633\u062a \u06a9\u0647 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u067e\u0627\u0686\u06cc Tomcat \u062f\u0631 \u06f1\u06f9 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f7.\u06f0.\u06f8\u06f1 \u0622\u0646\u200c\u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0646\u062f. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f7\u00bb \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u0641\u0631\u062f \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 \u00ab\u062f\u0648\u0631 \u0632\u062f\u0646 CVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f5\u00bb \u062a\u0648\u0635\u06cc\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u06f7\u06f7 \u062f\u0631 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-\u06f2\u06f0\u06f1\u06f7-\u06f1\u06f2\u06f6\u06f1\u06f6\u00bb \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u062f\u0648\u0631 \u0628\u0632\u0646\u062f \u0648 \u06a9\u062f \u0645\u0646\u0628\u0639 JSP\u0647\u0627 \u0631\u0627 \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u062c\u0639\u0644\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u060c \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u062f. \n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u062f\u0631 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc \u0627\u0633\u062a\u0631\u0627\u062a\u0633 \u06f2\u060c \u0627\u062d\u062a\u0645\u0627\u0644\u0627 \u0628\u0647 \u0648\u0641\u0648\u0631 \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc \u0627\u0633\u062a\u0631\u0627\u062a\u0633 \u06f2 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 \u0646\u0641\u0648\u0630 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc Equifax \u06a9\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u0627\u0633\u062a\u060c \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0686\u0646\u062f \u0633\u0627\u0644 \u067e\u06cc\u0634\u060c \u06cc\u06a9 \u06a9\u0631\u0645 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a \u06a9\u0647 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u067e\u0627\u0686\u06cc Tomcat \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0627\u062f\u060c \u0627\u0645\u0627 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u0632 \u0647\u06cc\u0686 \u0622\u0633\u06cc\u0628\u200c\u200d\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0646\u0645\u06cc\u200c\u06a9\u0631\u062f\u060c \u0628\u0644\u06a9\u0647 \u0627\u0632 \u062a\u0631\u06a9\u06cc\u0628 \u0646\u0627\u0645\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u06af\u0630\u0631\u0648\u0627\u0698\u0647\u200c\u0647\u0627\u06cc \u0645\u062a\u062f\u0627\u0648\u0644 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0631\u062f.", "creation_timestamp": "2026-07-27T00:01:41.804826Z"}, {"uuid": "fba7b037-9306-4c6f-92cb-88c81911a3d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/hacking_Attack/138511", "content": "Tomcat Manager without Default Creds\nhttps://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/\n\nI've been looking for a guide or how-to enumerate through the following scenario but haven't been able to find a resource that meets what I'm looking for. Tomcat 8.5 running on a Windows server, and my assumption is that I'm trying to get to the Manager App to upload the reverse shell as a WAR file. The issue that I'm running into is that the server isn't using any of the default/common tomcat credentials on the interface. This is where I'm getting stuck because every youtuber has either \"I already logged in\", \"use the metasploit module\" or \"google for default creds\" which I've done all of these and they do not work. I've been working at trying to find a foothold on this server for about a month. My server setup is - Windows Server 2019, ISO install, no updates. Apache Tomcat 8.5 management interfaces added at installation but no password was set. System is not vulnerable to CVE-2017-12617 or 2020-10487. Other than that there are several MSPRC ports open at 135 and some high ports, SMB, HTTPAPI on 5985, Tomcat on 8080 and no snmp. No alternate website being hosted as well, just what is looking like a vanilla Tomcat installation. I've hit that level of insanity where I keep running the same tools and exploits against it hoping it will work this time but I'm just not finding a foothold on the server. Any suggestions for a direction to look?    submitted by    /u/beerdini  (https://www.reddit.com/user/beerdini) \n [link] (https://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/)", "creation_timestamp": "2026-09-01T20:00:32.401299Z"}, {"uuid": "c77d209c-440e-4e54-a50f-7897d2861856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/hacking_Attack/138511", "content": "Tomcat Manager without Default Creds\nhttps://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/\n\nI've been looking for a guide or how-to enumerate through the following scenario but haven't been able to find a resource that meets what I'm looking for. Tomcat 8.5 running on a Windows server, and my assumption is that I'm trying to get to the Manager App to upload the reverse shell as a WAR file. The issue that I'm running into is that the server isn't using any of the default/common tomcat credentials on the interface. This is where I'm getting stuck because every youtuber has either \"I already logged in\", \"use the metasploit module\" or \"google for default creds\" which I've done all of these and they do not work. I've been working at trying to find a foothold on this server for about a month. My server setup is - Windows Server 2019, ISO install, no updates. Apache Tomcat 8.5 management interfaces added at installation but no password was set. System is not vulnerable to CVE-2017-12617 or 2020-10487. Other than that there are several MSPRC ports open at 135 and some high ports, SMB, HTTPAPI on 5985, Tomcat on 8080 and no snmp. No alternate website being hosted as well, just what is looking like a vanilla Tomcat installation. I've hit that level of insanity where I keep running the same tools and exploits against it hoping it will work this time but I'm just not finding a foothold on the server. Any suggestions for a direction to look?    submitted by    /u/beerdini  (https://www.reddit.com/user/beerdini) \n [link] (https://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/)", "creation_timestamp": "2026-09-02T01:00:51.167606Z"}, {"uuid": "fe3c5ca2-c00d-4bc4-aac3-68999f781f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/hacking_Attack/138511", "content": "Tomcat Manager without Default Creds\nhttps://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/\n\nI've been looking for a guide or how-to enumerate through the following scenario but haven't been able to find a resource that meets what I'm looking for. Tomcat 8.5 running on a Windows server, and my assumption is that I'm trying to get to the Manager App to upload the reverse shell as a WAR file. The issue that I'm running into is that the server isn't using any of the default/common tomcat credentials on the interface. This is where I'm getting stuck because every youtuber has either \"I already logged in\", \"use the metasploit module\" or \"google for default creds\" which I've done all of these and they do not work. I've been working at trying to find a foothold on this server for about a month. My server setup is - Windows Server 2019, ISO install, no updates. Apache Tomcat 8.5 management interfaces added at installation but no password was set. System is not vulnerable to CVE-2017-12617 or 2020-10487. Other than that there are several MSPRC ports open at 135 and some high ports, SMB, HTTPAPI on 5985, Tomcat on 8080 and no snmp. No alternate website being hosted as well, just what is looking like a vanilla Tomcat installation. I've hit that level of insanity where I keep running the same tools and exploits against it hoping it will work this time but I'm just not finding a foothold on the server. Any suggestions for a direction to look?    submitted by    /u/beerdini  (https://www.reddit.com/user/beerdini) \n [link] (https://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/)", "creation_timestamp": "2026-09-03T18:00:06.718638Z"}, {"uuid": "31e2000e-1d4d-4683-8a19-c09b2dcb3c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/hacking_Attack/138511", "content": "Tomcat Manager without Default Creds\nhttps://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/\n\nI've been looking for a guide or how-to enumerate through the following scenario but haven't been able to find a resource that meets what I'm looking for. Tomcat 8.5 running on a Windows server, and my assumption is that I'm trying to get to the Manager App to upload the reverse shell as a WAR file. The issue that I'm running into is that the server isn't using any of the default/common tomcat credentials on the interface. This is where I'm getting stuck because every youtuber has either \"I already logged in\", \"use the metasploit module\" or \"google for default creds\" which I've done all of these and they do not work. I've been working at trying to find a foothold on this server for about a month. My server setup is - Windows Server 2019, ISO install, no updates. Apache Tomcat 8.5 management interfaces added at installation but no password was set. System is not vulnerable to CVE-2017-12617 or 2020-10487. Other than that there are several MSPRC ports open at 135 and some high ports, SMB, HTTPAPI on 5985, Tomcat on 8080 and no snmp. No alternate website being hosted as well, just what is looking like a vanilla Tomcat installation. I've hit that level of insanity where I keep running the same tools and exploits against it hoping it will work this time but I'm just not finding a foothold on the server. Any suggestions for a direction to look?    submitted by    /u/beerdini  (https://www.reddit.com/user/beerdini) \n [link] (https://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1dp8zxc/tomcat_manager_without_default_creds/)", "creation_timestamp": "2026-09-04T00:00:40.455024Z"}, {"uuid": "71fed745-bfd1-453b-9c94-1c06c143f807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://t.me/GithubRedTeam/101026", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2017-12617-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lem0n817\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 03:48:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2017-12617 Apache Tomcat JSP upload RCE PoC (original by cyberheartmi9, MIT)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T06:00:04.067574Z"}, {"uuid": "47abbdc1-cad1-43bf-a7c1-54f154b11eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101026", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2017-12617-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lem0n817\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 03:48:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2017-12617 Apache Tomcat JSP upload RCE PoC (original by cyberheartmi9, MIT)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T01:00:37.936285Z"}, {"uuid": "20e744f4-b348-4405-9938-f3c66b2776a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"peewpw\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module uses a PUT request bypass to upload a jsp shell to a vulnerable Apache Tomcat configuration.\", \"disclosure_date\": \"2017-10-03\", \"fullname\": \"exploit/multi/http/tomcat_jsp_upload_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"Tomcat RCE via JSP Upload Bypass\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/tomcat_jsp_upload_bypass\", \"references\": [\"CVE-2017-12617\", \"URL-https://bz.apache.org/bugzilla/show_bug.cgi?id=61542\", \"EDB-42966\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Automatic\", \"Java Windows\", \"Java Linux\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:16.228087Z"}]}